Academy
The SOC curriculum
Eight phases take you from security operations foundations to running a SOC. Every lesson is complete guided material — concept, scenario, practice assets, a lab in the live console and an evaluation. Progress is tracked automatically from the work you do.
Recommended next step
How security operations work
Describe the collect → detect → triage → respond → improve loop
Security Operations Foundations · Theory · 14 min
Lessons completed
1/32
Curriculum length
13h 46m
12 min completed
Phases
8
Foundations → SOC management
Current level
Entry
Operations loop Telemetry families ATT&CK vocabulary
Security Operations Foundations
SOC Foundations · EntryThe vocabulary, telemetry and attack model everything else in the curriculum is built on.
After this phase you can
- Explain what a SOC defends and how
- Recognise the main telemetry sources
- Use ATT&CK to describe attacker behaviour